Multiple MFPs (multifunction printers) vulnerabilities
8 known vulnerabilities in Multiple MFPs (multifunction printers) from Sharp. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Multiple MFPs (multifunction printers): Out-of-bounds Read
Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.
- 7.5 High severity
Multiple MFPs (multifunction printers): Out-of-bounds Read
The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affect
- 7.4 High severity
Multiple MFPs (multifunction printers): Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for
- 9.1 Critical severity
Multiple MFPs (multifunction printers): Use of Hard-coded Credentials
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
- 9.1 Critical severity
Multiple MFPs (multifunction printers): Use of Hard-coded Credentials
There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their passwords (e.g., by examining the coredump), these accounts can be used to re-configure the device. As for the details of affected product n
- 9.1 Critical severity
Multiple MFPs (multifunction printers): Authentication Bypass Using an Alternate Path or Channel
"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details
- 7.5 High severity
Multiple MFPs (multifunction printers): Improper Limitation of a Pathname to a Restricted Directory
Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the r
- 9.0 Critical severity
Multiple MFPs (multifunction printers): Stack-based Buffer Overflow
The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected pro